relay_recipient_maps not working

6 msg	Mail gateway will not forward mail for multiple...
2 msg	postfix mangles MESSAGE-ID when passing to clamd
8 msg	Problems with either canonical_maps or alias_maps
16 msg	catchall alias for wildcard subdomains?
12 msg	Will/is there a way to prevent multiple attacks...
2 msg	Expression Assistance
2 msg	per user attachment filtering using header_checks
3 msg	Can I use reject_unlisted_sender for domain names
6 msg	sending email by Relay through ISP smtp
2 msg	duplicated messages with aliases.
4 msg	On-line RFCs in HTML without spam?
2 msg	local and remote users on same domain
11 msg	Large messages being dropped, but not by messag...
2 msg	.forward files question
1 msg	How to drop mail to a domain...
8 msg	mailbox_transport_maps as mysql table: some var...
1 msg	RE: Ruleset for incoming e-mail addresses
5 msg	custom queues
3 msg	Auto reply when winmail.dat file found

relay_recipient_maps not working
\ Richard Zinar (13 Jul 2007)
. \ Richard Zinar (13 Jul 2007)
. \ Magnus Bäck (13 Jul 2007)

Subject:	relay_recipient_maps not working
Group:	Postfix-users
From:	Richard Zinar
Date:	13 Jul 2007

Hi,

I'm undoubtedly overlooking something basic, but my relay_recipient_maps
doesn't seem
to be having the desired effect, since I see mail not being rejected for
non-existent users.

The main.cf file looks as follows:

disable_vrfy_command = yes
smtpd_helo_required = yes
inet_interfaces = $myhostname, localhost

mydestination =
mynetworks_style = host
local_recipient_maps =
local_transport = error:local mail delivery is disabled

header_checks = pcre:/etc/postfix/header_checks.pcre
relay_domains = hash:/etc/postfix/relay_domains
transport_maps = hash:/etc/postfix/transport

smtpd_recipient_restrictions =
reject_invalid_hostname
reject_non_fqdn_hostname
reject_non_fqdn_sender
reject_non_fqdn_recipient
reject_unknown_sender_domain
reject_unknown_recipient_domain
permit_mynetworks
reject_unauth_destination
check_recipient_access pcre:/etc/postfix/recipient_checks.pcre
check_helo_access hash:/etc/postfix/helo_checks
check_sender_access hash:/etc/postfix/sender_checks
check_client_access hash:/etc/postfix/client_checks
check_client_access pcre:/etc/postfix/client_checks.pcre
reject_rbl_client cbl.abuseat.org
reject_rbl_client list.dsbl.org
reject_rbl_client sbl.spamhaus.org
reject_rbl_client pbl.spamhaus.org
permit

smtpd_data_restrictions =
reject_unauth_pipelining
reject_multi_recipient_bounce
permit

canonical_maps =
hash:/etc/postfix/canonical_jpusers
hash:/etc/postfix/canonical_krusers

relay_recipient_maps =
hash:/etc/postfix/relay_recipients_crm
hash:/etc/postfix/relay_recipients_jpusers
hash:/etc/postfix/relay_recipients_jplists
pcre:/etc/postfix/relay_recipients_jplists.pcre
hash:/etc/postfix/relay_recipients_krusers
hash:/etc/postfix/relay_recipients_krlists
pcre:/etc/postfix/relay_recipients_krlists.pcre
hash:/etc/postfix/relay_recipients_ovusers

virtual_alias_maps =
hash:/etc/postfix/virtual_base
hash:/etc/postfix/virtual_crm
hash:/etc/postfix/virtual_jpusers
hash:/etc/postfix/virtual_jplists
pcre:/etc/postfix/virtual_jplists.pcre
hash:/etc/postfix/virtual_krusers
hash:/etc/postfix/virtual_krlists
pcre:/etc/postfix/virtual_krlists.pcre
hash:/etc/postfix/virtual_ovusers

The /etc/postfix/relay_domains file is as follows:

overture.com ok
overture.co.jp ok
overture.co.kr ok
overture.at ok
overture.au ok
overture.ca ok
overture.ch ok
overture.de ok
overture.dk ok
overture.es ok
overture.fi ok
overture.fr ok
overture.it ok
overture.jp ok
overture.kr ok
overture.nl ok
overture.no ok
overture.se ok

There are no wildcards in the various relay_recipient_map files (or
.pcre files). There is a wildcard in the transport
file, but I assumed the mail would be rejected before the transport file
is even consulted.

The various virtual_alias_maps also have no wildcard entries. (I'd show
these files, but they are quite long).
Here's an example log file entry:

Jul 12 18:38:26 sc8-smtp-001 postfix/smtpd[12444]: NOQUEUE: reject: RCPT
from unknown[121.128.167.198]: 554 Service unavailable; Client host
[121.128.167.198] blocked using cbl.abuseat.org; Blocked - see
http://cbl.abuseat.org/lookup.cgi?ip=121.128.167.198;
from=<teena> to=<gorman> proto=ESMTP
helo=<[121.128.167.198]>

This user (gorman) doesn't exist in any of the
relay_recipient_map files, and is not matched by any regexp in the pcre
files, so I don't
understand why the message didn't get rejected until it reached the rbl
checks.

If anyone can shed some light on this, I'd appreciate it. Thanks ...

Richard